RANDOM MAXIMAL ISOTROPIC SUBSPACES AND SELMER GROUPS 



BJORN POONEN AND ERIC RAINS 



Abstract. Under suitable hypotheses, we construct a probability measure on the set of 
closed maximal isotropic subspaces of a locally compact quadratic space over ¥ p . A random 
subspace chosen with respect to this measure is discrete with probability 1, and the dimen- 
sion of its intersection with a fixed compact open maximal isotropic subspace is a certain 
nonnegative-integer-valued random variable. 

We then prove that the p-Selmer group of an elliptic curve is naturally the intersection 
of a discrete maximal isotropic subspace with a compact open maximal isotropic subspace 
in a locally compact quadratic space over F p . By modeling the first subspace as being 
random, we can explain the known phenomena regarding distribution of Selmer ranks, such 
as the theorems of Heath-Brown, Swinnerton-Dyer, and Kane for 2-Selmer groups in certain 
families of quadratic twists, and the average size of 2- and 3-Selmer groups as computed by 
Bhargava and Shankar. Our model is compatible with Delaunay's heuristics for p-torsion in 
Shafarevich-Tate groups, and predicts that the average rank of elliptic curves over a fixed 
number field is at most 1/2. Many of our results generalize to abelian varieties over global 
fields. 



1. Introduction 



1.1. Selmer groups. D. R. Heath-Brown |HB93llHB94] . P. Swinnerton-Dyer |SD08| . and 



D. Kane |Kanllj obtained the distribution for the nonnegative integer s(E) defined as the 



F2-dimension of the 2-Selmer group Sel2 E minus the dimension of the rational 2-torsion 
group i?(Q)[2], as E varies over quadratic twists of certain elliptic curves over Q. The 
distribution was the one for which 

Prob (s(E) = d) = 





In |HB94j . it was reconstructed from the moments of 2 S ^^; in |SD08j and |Kanll] , it arose 
as the stationary distribution for a Markov process. 

Our work begins with the observation that this distribution coincides with a distribu- 
tion arising naturally in combinatorics, namely, the limit as n — > oo of the distribution of 
dim(Z Pi W) where Z and W are random maximal isotropic subspaces inside a hyperbolic 
quadratic space of dimension 2n over F 2 . Here it is essential that the maximal isotropic sub- 
spaces be isotropic not only for the associated symmetric bilinear pairing, but also for the 
quadratic form; otherwise, one would obtain the wrong distribution. That such a quadratic 
space might be relevant is suggested already by the combinatorial calculations in |HB94| . 
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Is it just a coincidence, or is there some direct relation between Selmer groups and intersec- 
tions of maximal isotropic subgroups? Our answer is that Sei2 E is naturally the intersection 
of two maximal isotropic subspaces in an infinite- dimensional quadratic space V over F2. 
The fact that it could be obtained as an intersection of two subspaces that were maximal 
isotropic for a pairing induced by a Weil pairing is implicit in standard arithmetic duality 
theorems. 

To make sense of our answer, we use the theory of quadratic forms on locally compact 
abelian groups as introduced by A. Weil in |Wei64] . The locally compact abelian group V 
in the application is the restricted direct product of the groups R\Q P , E[2]) for p < 00 with 
respect to the subgroups of unramified classes. The quadratic form Q is built using D. Mum- 
ford's Heisenberg group, using ideas of Yu. Zarhin |Zar74| §2]. Then arithmetic duality the- 
orems are applied to show that the images of the compact group Y\ p<00 E(Q P ) /2E (Q p ) and 
the discrete group H 1 (Q, E[2]) are maximal isotropic in (V,Q). Their intersection is Se^E. 

1.2. Conjectures for elliptic curves. This understanding of the structure of Sel 2 E sug- 
gests the following, in which we replace 2 by p and generalize to global fields: 

Conjecture 1.1. Fix a global field k and a prime p. 

(a) As E varies over all elliptic curves over k, 

Prob (dim Fp Sel p E — dj - 

(For the sake of definiteness, we define the probability by considering the finitely many 
elliptic curves y 2 = x 3 + ax + b where a,b G k have height < B, and looking at the limit 
of the probability as B — >■ 00; use a long Weierstrass equation if char k is 2 or 3.) 

(b) The average of # Sel p E over all E/k is p + 1 . 

(c) For m G Z>o, the average of Sel p E) m over all E/k is YYiLiiP 1 + 1) ■ 

Several results in the direction of Conjecture 11.11 are known: 

• When p — 2, Heath-Brown |HB941 Theorem 2] proved the analogue of Conjecture ll.il 
for the family of quadratic twists of y 2 = x 3 — x over Q, with the caveat that the 
distribution of dimSei2-E is shifted by +2 to account for the contribution of E[2] 
(cf. Remark l4.16p . Swinnerton-Dyer |SD08] and Kane |Kanll] generalized this result 





to the family of quadratic twists of any fixed elliptic curve E/Q with E[2] C 
and no rational cyclic subgroup of order 4. 

For the family of all elliptic curves E/Q with E{2] C E(Q), G. Yu (Yu06l Theorem 1] 
built upon Heath-Brown's approach to prove that the average size of Sel2 E is finite. 
(Strictly speaking, if the limit defining the average does not exist, the result holds 
with a lim sup.) See also |Yu05| for results for other families of elliptic curves over 
Q. 

For the family of all elliptic curves over ¥ q (t) with 3 f q, A. J. de Jong [dJ02] proved 
that the average size of Sel3 E (in the lim sup sense) is at most 4 + 0(l/q), where 
the 0(l/q) is an explicit rational function of q. In fact, de Jong speculated that the 
truth was 4, and that the same might hold for number fields. 

For the family of all elliptic curves over Q, M. Bhargava and A. Shankar proved that 
the average size of Sel2 is 3 |BS10a] and the average size of Scl 3 is 4 [BSlObJ . 
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For E over a number field k with a real embedding and with E[2](k) = 0, B. Mazur 
and K. Rubin |MR10) and Z. Klagsbrun showed how to twist judiciously to obtain 



lower bounds on the number of quadratic twists of E (up to a bound) with prescribed 
dim Sel 2 . 

As has been observed by Bhargava, since rk E(k) < dim^ Sel p E, Conj ect ure 11.1 li b"]) would 
imply that Prob(rki?(A;) > 2) is at most (p+l)/p 2 . If we assume this for an infinite sequence 
of primes p, we conclude that asymptotically 100% of elliptic curves over k have rank or 1. 

A priori, the average rank could still be greater than 1 if there were rare curves of very 



high rank, but Conjecture ll.llfb|) for an infinite sequence of primes p implies also that the 
elliptic curves of rank > 2 contribute nothing to the average value of ikE(k), and in fact 
nothing to the average value of p TkE ( k >. (Proof: Define e p as the lim sup as B — > oo of the 
sum of p rkB ( fc ) over curves of rank > 2 of height bounded by B divided by the total number 
of curves of height bounded by B. If q is a larger prime, then e p < {p 2 /q 2 )e q < (p 2 /q 2 ){q + 1), 
which tends to as q — y oo, so e p = 0.) 

If in addition we assume that the parity of rkE(k) is equidistributed, we obtain the 
following well-known conjecture: 

Conjecture 1.2. Fix a global field k. Asymptotically 50% of elliptic curves over k have 
rank 0, and 50% have rank 1. Moreover, the average rank is 1/2. 

Remark 1.3. D. Goldfeld conjectured that the average rank in a family of quadratic twists 
of a fixed elliptic curve over Q was 1/2 |Gol79t Conjecture B]. Other evidence for Conjec- 
ture 11.21 was provided by the extensive study by N. Katz and P. Sarnak of a function field 
analogue |KS99allKS99b] . 

Also, as has been observed by Rubin, the distribution in Conjecture ll.l( laj) tends, as 
p — > oo, to the distribution assigning probability 50% to each of and 1. Thus, even 
without assuming equidistribution of parity, Conjecture 11.11 for any infinite set of primes p 
would imply not only that 100% of elliptic curves have rank or 1, but also that at least 
50% have rank 0, and that the average rank is at most 1/2. 

Conj ecture 1 1 . 1 (laj ) for a single p does not duplicate C. Delaunay's prediction for dimF p UI(E) [p] 
jDelOlllDelOT] . Instead the predict ions complement each other: we prove that the only distri- 
bution on rk£'(Q) compatible with both predictions is the one in Conjecture |1.2| for which 
rkE(Q) is or 1, with probability 1/2 each (see Theorem 15. 2p . A related result, that Con- 
jectures [TTTJjHj) (for p = 2) and [T72] together imply the III [2] predictions for rank and 1, had 
been observed at the end of |Del07j . 

If we also use the heuristic that the dimensions of diniF p Sel p E for different p are inde- 
pendent except for the constraint that their parities are equal, we are led to the following 
generalization of Conjecture 11.11 

Conjecture 1.4. Fix a global field k and let n be a squarefree positive integer. Let u(n) be 
the number of prime factors of n. 

(a) Fix dp G Z>o for each prime p dividing n. As E varies over all elliptic curves over k, 
ProbJSel^^n^/^) = ^ II f f II^ 1 + 



p\n J p\n \ \j>0 / \j 

if the dp all have the same parity, and the probability is otherwise. 



(b) The average of #Sel n E over all E/k is the sum of the divisors of n. 

(c) Form G Z>o, the average of(#Sel n E) m over all E/k is Y[ P \ n YYiLi(P l + -0- 

The factor of 2 w ( n ) _1 arises in ([aj), because only 2 of the 2 U ^ choices of parities for p 
are constant sequences. 



n 



Remark 1.5. Based on investigations for n < 5, Bhargava and Shankar have proposed Con- 
jecture ll.4lfb|) for all positive integers n, at least for k — Q. 



Remark 1.6. As was noticed during a discussion with Bhargava and Kane, if we combine 
Delaunay's heuristics for ffl[n] with Conjecture 11.21 for varying E/Q, we can predict the 
distribution for the abelian group Sel n E for any fixed positive integer n. Namely, E(Q) tors = 
with probability 1, and in that case the term on the left in 



-4fer -> Sel„£ -> ni(.B)N 
n£(Q) v ;[ J 

is free, so the sequence of Z/nZ-modules splits; thus, given Conjecture II. 2} the distribution 
of Sel n E can be deduced from knowing the distribution of III(i?)[n] for rank curves and 
for rank 1 curves. 

1.3. Conjectures for abelian varieties. In fact, our theorems are proved in a more general 
context, with [2] : E — > E replaced by any self-dual isogeny A: A — > A that is of odd degree 
or that comes from a symmetric line sheaf on an abelian variety A over a global field k. 
(See Theorem 14.131 ) In this setting, we have a surprise: it is not SeL.^. itself that is the 
intersection of maximal isotropic subgroups, but its quotient by III 1 (A;, A[A]), and the latter 
group is sometimes nonzero, as we explain in Section [3j Moreover, for certain families, such 
as the family of all genus 2 curves, there may be "causal" subgroups of SeU A, which increase 
its expected size by a constant factor. Taking these into account suggests the following: 

Conjecture 1.7. Fix a global field k of characteristic not 2, and fix a positive integer g. Let 
f G k[x] range over separable polynomials of degree 2g+l (with coefficients of height bounded 
by B, with B — > oo). Let X be the smooth projective model of y 2 = f(x). Construct the 
Jacobian A := JacX. Then the analogues of Conjectures \1. 6 2\ and \1.4\ hold for Se\ p A 
and Sel n A, with the same distributions. They hold also with 2g + I replaced by 2g + 2 if n 
is odd. 

Conjecture 1.8. Fix a global field k of characteristic not 2, and fix an even positive integer 
g. Let f G k[x] range over polynomials of degree 2g + 2 (with coefficients of height bounded 
by B , with B — > oo). Let X be the smooth projective model of y 2 = f(x), and let A = JacX. 

(a) IfXs c i 2 is the 1,> -valued random variable predicted by Conjecture } 1 . i( [aj) to model dim^ Sel2 E, 
then the analogous random variable for §e\ 2 A is Xg c i 2 + 1. 

(b) The average of # Sel2 A is 6 (instead of 3). 

(c) For m G Z> , the average of (# Sel 2 A) m is 2 m HZii 2 * + 1 )- 

Example 14. 191 will explain the rationale for the +1 in Conjecture II .8(laj ) . and will explain 
why we do not venture to make an analogous conjecture for odd g. 



Remark 1.9. Although we have formulated conjectures for the family of all curves of a spec- 
ified type, our model makes sense also for more limited families (e.g., a family of quadratic 

4 



twists). One should take into account systematic contributions to the Selmer group, however, 
as was necessary in Conjecture 11.81 

2. Random maximal isotropic subspaces 

2.1. Quadratic modules. See |Sch85t l.§6 and 5.§1] for the definitions of this section. 
Let V and T be abelian groups. Call a function Q: V — > T a (T-valued) quadratic form 
if Q is a quadratic map (i.e., the symmetric pairing ( , ) : V x V — > T sending (x,y) to 
Q(x + y) — Q(x) — Q{y) is bilinear) and Q(av) = a 2 Q(v) for every a G Z and Then 
(V,Q) is called a quadratic module. 

Remark 2.1. A quadratic map Q satisfying the identity Q(— u) = Q(t') is a quadratic form. 
(Taking a; = y — shows that Q(0) = 0, and then Q(av + (— — Q(av) — Q(—v) = 
a(Q(0) — Q(v) — Q(—v)) computes Q(av) for other a G Z by induction.) 

Lemma 2.2. Lei (V, Q) fre a quadratic module. Suppose that v G V and £ G Z are sitc/i iaai 
= 0. J/^ zs odd, taen = 0. If i is even, then 2iQ(v) = 0. 

Proof. We have £ 2 Q(v) = Q(£v) = 0, and 2lQ(v) = i(v, v) = (£v, v) = 0. □ 

Given a subgroup W C V, let ly- 1 := {u G V : = for all w G VT}. Call a 

maximal isotropic subgroup of (V, Q) if VT- 1 = and Q\w = 0. Let Xy be the set of maximal 
isotropic subgroups of (V, Q). 

Remark 2.3. Say that W is maximal isotropic /or the pairing ( , ) if W L = W. If W — 2W 
or T[2] = 0, then W 1 - = W implies Q\w — 0, but in general Q\w — is a nonvacuous extra 
condition. 

Call a quadratic module (V,Q) nondegenerate if Q is IR/Z-valued and V is finite (we will 
relax this condition in Section |2~^1) and the homomorphism V — > V* := Hom(V, IR/Z) defined 
by v i — y (w i — y (v,w)) is an isomorphism. Call (V,Q) weakly metabolic if it is nondegenerate 
and contains a maximal isotropic subgroup. (Metabolic entails the additional condition that 
the subgroup be a direct summand.) 

Remark 2.4. Suppose that (V, Q) is a nondegenerate quadratic module, and X is an isotropic 
subgroup of (V,Q). Then 

(a) The quotient X /X is a nondegenerate quadratic module under the quadratic form Qx 
induced by Q. 

(b) If W G 2y, then (WnX^+X G X v , and ((W nl 1 ) +X)/X G X x ± /X . Let ir v ' x± / x (W) 
denote this last subgroup, which is the image of W D X 1 - in X /X. 

Remark 2.5. If (V, Q) is a nondegenerate quadratic module with j^V < oo, the obstruction 
to V being weakly metabolic is measured by an abelian group WQ ~ © p W<5G°) called 
the Witt group of nondegenerate quadratic forms on finite abelian groups |Sch85t 5.§1]. The 
obstruction for (V,Q) equals the obstruction for X^/X for any isotropic subgroup X of 
(V,Q) (cf. [Sch85l Lemma 5.1.3]). 

2.2. Counting subspaces. 

Proposition 2.6. Let (V, Q) be a 2n- dimensional weakly metabolic quadratic space over 
F := F p; with Q taking values in ^Z/Z ~ F. 
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(a) All fibers of tt v ' x l x : Xy -> X x ± /X have size UT=i (P^ + 1 )- 



(b) We have#T v =Il^oV + l)- 

(c) Let W be a fixed maximal isotropic subspace of V. Let X n be the random variable 
dim(Z fl W), where Z is chosen uniformly at random from Xy. Then X n is a sum 
of independent Bernoulli random variables B±, . . . , B n where B\ is 1 with probability 
1/ + 1) and otherwise. 

(d) For < d < n, let a^ n := Yioh{X n = d), and let := lim^oo a^ n . Then 



n_1 i i 71-1 i i -i 

nZ+p_yrl+p l Z 
i + v i ~ 11 T 



EddnZ d 
AA 1 +p l J-" 1 - 1 + V 

d>0 i=0 F 

1 + p l Z 



d>0 



P~ 



(e) For < d < n, we have 

n—l d d—1 

na+p-T'n^iid-p 



i=0 3=1 y j=0 



(f) For d > 0, we have 



d 

P 

a d = c 



where 



j>0 i>0 

Proof. 

(a) Choose a full flag in X; then ir v > x / x factors into dimX maps of the same type, so we 
reduce to the case dimX = 1. Write X = Fv with v £ V. For Z £ Xy, let Z be its image 
in X x ± jx- There is a bijection {Z £ Xy : v £ Z} — >■ Z_x± /x defined by Z i— > Z = Z/X. 

Fix W £ X x ±/x, and let W £ Xy be such that W = W/X. We want to show that 
j^\Z E Xy : Z = W} = p n ~ l + 1. This follows once we show that the map 

{Z £ X v : Z = W} — > {codimension 1 subspaces of W} U {W} 
Z ^ Zf] W 

is a bijection. If v £ Z, then Z = W implies that Z = W. If v £ Z, then Z = W implies 
that Z C\W has codimension 1 in W. Conversely, for a given W\ of codimension 1 in W, 
the Z £ Xy containing W\ are in bijection with the maximal isotropic subspaces of the 
weakly metabolic 2-dimensional space Wf~/Wi, which is isomorphic to (F 2 ,xy), so there 
are two such Z: one of them is W, and the other satisfies Z fl W = W\ and Z = W. 
Thus we have the bijection. 

(b) Apply (jaj) to a maximal isotropic X. 
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If n > 0, fix a nonzero v in W, and define Z as in the proof of (|aj). Then 

dimZ D W = dimZ nf + 5 V< , Z , 



where 8 ve w is 1 if f G Z and otherwise. The term dim Z D W has the distribution 
X n _i. Conditioned on the value of Z, the term 5 v( zz is 1 with probability l/(p n_1 + 1) 
and otherwise, since there are p 71 " 1 + 1 subspaces Z G Xy with the given Z, and only 
one of them (namely, the preimage of Z under V — > V/Fv) contains v. Thus X n is 
the sum of and the independent Bernoulli random variable B n , so we are done by 

induction on n. 

(d) The generating function for X n is the product of the generating functions for Bi, . . . , B n ; 
this gives the first identity. The second follows from the first. 

(e) This follows from ([d]) and Cauchy's g-binomial theorem (which actually goes back to 
[Rotll] and is related to earlier formulas of Euler). Namely, set t — 1/p in formula (18) 
of |Cau43| . and divide by U^(l+p- j ). 

(f) Take the limit of (jej) as n — > oo. The alternative formula for c follows from substituting 



Remark 2.7. There is a variant for finite-dimensional vector spaces V over a finite field F of 
non-prime order. One can define the notion of weakly metabolic quadratic form Q : V — » F, 
and then prove Proposition 12.61 with q in place of p. 

If we consider only even-dimensional nondegenerate quadratic spaces over F, then the 
obstruction analogous to that in Remark [2J3 takes values in a group of order 2. The obstruc- 
tion is the discriminant in F x /F x2 if charF ^ 2, and the Arf invariant (see |Sch85t 9. §4]) if 
char F = 2. 

Remark 2.8. By Lemma 12.21 a quadratic form on a 2-torsion module will in general take 
values in the 4-torsion of the image group. Thus we need an analogue of Proposition ^. 6( lcj) for 
a iZ/Z-valued quadratic form Q on a 2?i-dimensional F2-vector space V such that Q(V) (jL 
or equivalently such that (x,x) = 2Q(x) is not identically 0. 
The map x i— > (x, x) is a linear functional V —> |Z/Z ~ F 2 since 

(x + y, x + y) = (x, x) + 2(x, y) + (y, y) = (x, x) + (y, y). 

Hence there exists a nonzero c G V such that (x, x) = (x, c) for all x G V. This equation 
shows that for any maximal isotropic subspace W of V, we have c G W = W. The map 
W i — y W/F2C defines a bijection between the set of maximal isotropic subspaces of V and the 
set of maximal isotropic subspaces of (F 2 c)- L /F 2 c, which is a |Z/Z-valued quadratic space. 
So the random variable dim(Z fl W) for V is 1 plus the corresponding random variable for 
the ^Z/Z-valued quadratic space of dimension dim V — 2. 

Definition 2.9. Given a prime p, let Xg e i p be a Z> -valued random variable such that for 
any d G Z> , the probability Prob(Xg e i p = d) equals the ad in Proposition l2.6H) d|). 

In the notation of Proposition 12. 6( lcj). we can also write 



1+p 



1 - p~ 2j 

1 - p-3 



for j 7^ and cancelling common factors. 



□ 



00 




n=l 
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Remark 2.10. The distribution of Xs e i 2 agrees with the distribution of s(E) mentioned at 
the beginning of Section 11.11 

2.3. Some topology. To interpret probability and not only a limit of probabilities, 
we are led to consider infinite-dimensional quadratic spaces. The naive dual of such a space 
V is too large to be isomorphic to V, so we consider spaces with a locally compact topology 
and use the Pontryagin dual. In order to define a probability measure on the set of maximal 
isotropic subspaces, we need additional countability constraints. This section proves the 
equivalence of several such countability constraints. 

For a locally compact abelian group G, define the Pontryagin dual G* := Hom contg (G, R/Z). 
Recall that a topological space is a-compact if it is expressible as a union of countably many 
compact subspaces, first-countable if each point has a countable basis of neighborhoods, 
second-countable if the topology admits a countable basis, and separable if it has a countable 
dense subset. 

Proposition 2.11. Let G be a locally compact abelian group. The following are equivalent: 

(a) G* is a -compact. 

(b) G is first- countable. 

(c) G is metrizable. 

Moreover, G is second- countable if and only if G and G* are both a-compact. 

Proof. After peeling off a direct factor IR n from G, we may assume that G contains a compact 
open subgroup K, by the Pontryagin-van Kampen structure theorem |vK35| Theorem 2]. 
Each of (a), (b), (c) holds for G if and only if it holds for K, and for K the three conditions 
are equivalent to second-countability by |Kak43| Theorem 2 and the bottom of page 366]. 
To prove the final statement, observe that G is second-countable if and only if K is second- 
countable and G/K is countable. By the above, K is second-countable if and only G* is 
cr-compact; on the other hand, G/K is countable if and only if G is er-compact. □ 

Corollary 2.12. Let G be a locally compact abelian group such that G ~ G* . Then the 
following are equivalent: 

(a) G is a-compact. 

(b) G is first- countable. 

(c) G is metrizable. 

(d) G is second-countable. 

(e) G is separable. 

Proof. Proposition 12.111 formally implies the equivalence of (a), (b), (c), (d). To obtain 

(d) ==>- (e), choose one point from each nonempty set in a countable basis. To prove 

(e) ==>- (a) , reduce to the case that G contains a compact open subgroup K; then separability 
implies that G/K is finite, so G is a-compact. □ 

2.4. Quadratic forms on locally compact abelian groups. 

Definition 2.13. A locally compact quadratic module (V,Q) is a locally compact abelian 
group V equipped with a continuous quadratic form Q: V — > R/Z. (This notion was in- 
troduced in |Wei64t p. 145], where Q was called a "caractere du second degre"; for him, 
the codomain of Q was the group of complex numbers of absolute value 1, because he was 
interested in the Fourier transforms of such Q.) 
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The definitions of maximal isotropic and nondegenerate extend to this setting. 



Definition 2.14. Call a nondegenerate locally compact quadratic module (V,Q) weakly 
metabolic if it contains a compact open maximal isotropic subgroup W; we then say also that 
(V, Q, W) is weakly metabolic. 

Remark 2.15. In Definition I2.14| it would perhaps be more natural to require the subgroup 
W to be only closed, not necessarily compact and open. Here we explain that the two 
definitions are equivalent when V contains a compact open subgroup, which is not a strong 
hypothesis, since by the Pontryagin-van Kampen structure theorem, if V is a locally compact 
abelian group, then V ~ 1R™ © V as topological groups, where V contains a compact open 
subgroup. 

If (V, Q) is a nondegenerate locally compact quadratic module containing a compact open 
subgroup K, then X := K D K ± is an compact open subgroup that is isotropic for the 
pairing. Then Q restricts to a continuous linear map X -> |Z/Z, and its kernel Y is a 
compact open subgroup that is isotropic for Q. Next, if W is any closed maximal isotropic 
subgroup of (V,Q), then (W fl Y- 1 ) + Y is a compact open maximal isotropic subgroup of 
(V,Q) (cf. Remark [221®). 

Remark 2.16. If (V,Q) is a nondegenerate locally compact quadratic module containing a 
compact open isotropic subgroup X, then the obstruction to (V, Q) containing a maximal 
isotropic closed subgroup is the same as that for X /X, so the obstruction is measured by 
an element of WQ that is independent of X (cf. Remark 12. 5p . 

Example 2.17. If W is a locally compact abelian group, then V := W x W* may be equipped 
with the quadratic form Q((w, /)) := f(w). If W contains a compact open subgroup Y, then 
its annihilator in W* is a compact open subgroup Y' of W*, and X := Y x Y' is a compact 
open subgroup of V, so Remark 12. 151 shows that (V,Q) is weakly metabolic. 

Example 2.18 (cf. |Bra48| Theoreme 1]). Suppose that (Vi,Qi,Wi) for i G I are weakly 
metabolic. Define the restricted direct product 

V := Jl'(Vi, W 4 ) := < (Ui)igi G VJ : v t e Wi for all but finitely many i 
iel I iel 

Let := Yl ieI Wi. As usual, equip V with the topology for which W is open and has the 
product topology. For v := G V, define Q(f) = X^ie/ Qi{ v i)i which makes sense since 
Qi{vi) = for all but finitely many %. Then (V,Q,W) is another weakly metabolic locally 
compact quadratic module. 

Moreover, if I is countable and each V* is second-countable, then is second-countable 
too. (Proof: Use Corollary 12.121 to replace second-countable by a-compact. If each Vi is 
a-compact, then each Vi/Wi is countable, so — ® i€ jVi/Wi is countable, so V is 

a-compact.) 

Let (V, Q) be a locally compact quadratic module. Let Xy be the set of maximal isotropic 
closed subgroups of (V,Q). Let Xy be the poset of compact open isotropic subgroups of 
(V,Q), ordered by (reverse) inclusion. 

Theorem 2.19. Let (V,Q,W) be a second-countable weakly metabolic locally compact qua- 
dratic module. 
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(a) The set Xy is a countable directed poset. 

(b) The finite sets I x ± /X for X G Xy with the maps t\ x H x ^ x H x ^ for X 1 C X 2 (cf. Re- 
mark pT^f [b|) ) form an inverse system. 

(c) If f] XeX X = 0, then the collection of maps ir v,x l x induce a bijection 

Xy -)■ hm l x ± /x . 
xex v 

Equip Ty with the inverse limit topology. 

(d) In the remaining parts of this theorem, assume that p is a prime such that pV = 0. Then 
there exists a unique probability measure fi on the Borel a-algebra of Ty such that for 
every compact open isotropic subgroup X of (V,Q), the push-forward iu' X ^ X jj, is the 
uniform probability measure on the finite set I x ±/ X . 

(e) The measure fi is invariant under the orthogonal group Aut(V,Q). 

(f) If Z is distributed according to fi, thenProb(Z is discrete) = 1 and Prob(Zr\W is finite) = 
1. If moreover dim.Y p V is infinite, then the distribution of dim(Z D W) is given by Xs e \ p 
(see Definition \2.9\) . 

Proof. 

(a) The intersection of two compact open isotropic subgroups of V is another one, so Xy is 
a directed poset. To prove that Xy is countable, first consider the bijection 

{compact open subgroups of W} —> {finite subgroups of V/W} (1) 

X ^ X L /W. 

Since V/W is a countable discrete group, both sets above are countable. The map 

Xy — > {compact open subgroups of W} 

x^xnw 

has finite fibers, since the X G Xy containing a given compact open subgroup Y of 
W are in bijection with the isotropic subgroups of the finite group Y /Y. Thus Xy is 
countable. 

(b) Given X\ C X 2 C X 3 the maps n Xi / Xi ' x j l x i for i < j behave as expected under 
composition. 

(c) The same computation proving (jb]) shows that the map is well-defined. If X G Xy, then 
X 1 - is another compact open subgroup of V since it contains X as a finite-index open 
subgroup. The group (X- 1 )* ~ V/X is a discrete F p - vector space, so it equals the direct 
limit of its finite-dimensional subspaces. Taking duals shows that X L is the inverse limit 
of its finite quotients, i.e., of the groups X /Y where Y ranges over open subgroups 
of X L . Moreover, every open subgroup of X 1 - contains an open subgroup of X (just 
intersect with X), so it suffices to take the latter. 
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Now the inverse map (Z x ) H- Z is constructed as follows: given (Zx) G hi5 XgA . /x> 

let 

~ / X ± \ x 1 - 

Z x := hm Zyn— C hm — = X x 

ycx rex 

Z:= |J Z x . 

xex v 

The maps in the inverse system defining Z are surjections, so the image of Zx in X / X 
equals Z x . If X, X' e <*y and X' C X, then Z x = Z x , n X x , so Z n X L = Z x . Since 
each Zy is isotropic in Y^-fY, the group Zx is isotropic, so Z is isotropic. If z G Z -1 , then 
we have z G X -1 for some X, and then for any YCX, the element 2 mod Y G Y /Y 
is perpendicular to 7r y,y ' Y (Z) = Zy, but Zy = Zy, so z mod y G Zy, and also 
z mod Y G X^/F; this holds for all Y C X, so z e Z. Thus Z x = Z; i.e., Z e Xy. 

Now we show that the two constructions are inverse to each other. If we start with 
(Zx), then the Z produced by the inverse map satisfies tx v,x ^ x (Z) = Zx- Conversely, 
if we start with Z, and define Zx '■= tt v ' x ^ x (Z), then the inverse map applied to (Zx) 
produces Z' such that ZflX" 1 C Z' for all X, so Z C Z' , but Z and Z' are both maximal 
isotropic, so Z = Z 1 . 

(d) Since V/W is a discrete F p - vector space of dimension K , we may choose a cofinal in- 
creasing sequence of finite-dimensional subspaces of V/W, and this corresponds under 
([T]) to a cofinal decreasing sequence Y±, Y2, . . . of compact open subgroups of W whose 
intersection is 0. Thus (jej) applies. Each map in the inverse system has fibers of constant 
size, by Proposition I2.6(laj ). so the uniform measures on these finite sets are compatible. 
By |Bou04l III.§4.5, Proposition 8(iv)], the inverse limit measure exists. 

(e) The construction is functorial with respect to isomorphisms (V,Q) — > (V',Q'). 

(f) Since Yl^Lo a r = 1? it suffices to prove the last statement, that Prob(dim(Z D W) = r) = 
a r . Let Yi be as in the proof of (jd]). Then dim(Z D W) is the limit of the increasing 
sequence of nonnegative integers dim(7r y,y > ' Yi (Z) fl ir v ' Y i ' Yi (W)). By Prop osit ior j2 . 6 (icj ) 
and its proof, the difference of consecutive integers in this sequence is a sum of indepen- 
dent Bernoulli random variables. Since Y2j>i P^ob(Bj = 1) converges, the Borel-Cantelli 
lemma implies that 

Prob (dim(Z HW)^ dim(7r v ^ ±/Y '(Z) n n v ^ /Yi (W))) -> 

as i — > 00. In particular, Prob (dim(Z fl W) = 00) is 0. On the other hand, dimY^ /Yi — > 

00 as i 00, so 

Prob (dim(Z DW) = d) = lim a dn = a d = Prob (X Sc , = d) . □ 

Remark 2.20. There is only one infinite-dimensional second-countable weakly metabolic lo- 
cally compact quadratic F p - vector space (V,Q), up to isomorphism. Inside V we are given 
a compact open maximal isotropic subspace W, and Theorem I2.19[jff implies the existence 
of a discrete maximal isotropic closed subspace Z with Z fl W = 0. Since V is infinite and 
second-countable, dim]p p Z = K , so the isomorphism type of Z as locally compact abelian 
group is determined. The pairing Z x W — > R/Z defined by (z, w) 1— > Q(z + w) puts Z and 

il 



W in Pontryagin duality. Now the summing map Z x W — > V is an isomorphism under 
which Q corresponds to the standard quadratic form on Z x Z* defined in Example 12.171 



Remark 2.21. Suppose that V is as in Theorem 12. 19fl f]). and that Z G Xy is chosen at random. 
The probability that Z contains a given nonzero vector v of V then equals 0, because for any 
compact open isotropic subgroup X < V small enough that v G X ± — X, if dimX ± /X = 2n, 
then the probability that n v ' x ^ X (Z) contains the nonzero element n v ' x l x {v) is l/(p n + 1), 
which tends to as X shrinks. Now, if we fix a discrete Zq G Xy and choose Z G Xy at 
random, then dim(Z D Zq) = with probability 1 by the previous sentence applied to each 
nonzero vector of the countable set Zq. 

2.5. Moments. Given a random variable X, let E(X) be its expectation. So if m G Z> , 
then K(X m ) is its m th moment. 

Proposition 2.22. Fix a prime p and fix m G Z> . Let X n be as in Proposition 1 2. olfe j) . and 

/e£ Xsci p fre as m Definition \2.iA Then 

fa) VFe nai>e 



E 



((^n=n T 



p* + 1 



1 1 +p-(n-i) 
m 

E((p x ^) m ) = JJ^ + l). 
i=i 

In particular, K(p Xsel p) = p + 1. 

(b) VKe aa^e Prob(X n is even) = 1/2 /or eaca n > 0, and Prob(Xg e i p is even) = 1/2. 

(c) If we condition on the event that X$ c \ p has a prescribed parity, the moments in (plj) remain 
the same. The same holds for the m th moment of p Xn if m < n. 

Proof. 

(a) Substitute z = p m in Proposition I2.6tl d|). The products telescope. 



(b) Substitute z = — 1 in Proposition [2T6]Jd]) . 



(c) Substitute z = —p m in Proposition I2.6ll d"l) . 



□ 



3. Shafarevich-Tate groups of finite group schemes 

3.1. Definitions. For each field k, choose an algebraic closure k and a separable closure 
k s C k, and let Gk '■= Gal(k s /k). 

A local field is a nondiscrete locally compact topological field; each such field is a finite 
extension of one of R, Q p , or ¥ p ((t)) for some prime p. A global field is a finite extension 
of Q or F p (t) for some prime p. Let fl be the set of nontrivial places of k. For v G f2, let 
k v be the completion of k at v, so k v is a local field; if v is nonarchimedean, let O v be the 
valuation ring in k v . 

For a sheaf of abelian groups M on the big fppf site of Spec k, define 

III 1 (A;, M) := ker ( R\k, M) -> JJ H 1 ^, M) ] . (2) 
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Remark 3.1. If M is represented by a smooth finite-type group scheme over k, such as the 
kernel of an isogeny of degree not divisible by char k, then we may interpret the cohomology 
groups as Galois cohomology groups: E 1 (k,M) =R 1 (G k ,M(k s )) and so on. 

Definition 3.2. Let X be a smooth projective curve over k. Let A = J&cX. The degree 
g — 1 component of the Picard scheme of X contains a closed subscheme T parametrizing 
line sheaves on X whose square is isomorphic to the canonical sheaf of X. This T is a torsor 
under A[2], called the theta characteristic torsor. Let cr G H 1 (/c, A[2\) be its class. 

3.2. Vanishing criteria. The following criteria for vanishing of LU 1 (fc, M) will be especially 
relevant for Theorem 14. 13lfb]) . 

Proposition 3.3. Suppose that M is a finite etale group scheme over k, so we identify M 
with the finite G^-module M(k s ). 

(a) IfM = Z/nZ, then UI 1 (k,M) = 0. 

(b) If M is a direct summand of a direct sum of permutation Z / nL-modules arising from 
finite separable extensions of k, then LU 1 (fc,M) = 0. 

(c) Let G be the image of Gk in AutM(fc s ). Identify H 1 (G,M) with its image under the 
injection H 1 (G f , M) H 1 ^, M). Then 

m 1 (k,M)C p| ker (H'(G,M) -»■ R\H,M)) . 

cyclic H < G 

(d) If p is a prime such that pM = and the Sylow p- subgroups of Ant M(k s ) are cyclic, 
then in 1 (Jfc,M) = 0. 

(e) If E is an elliptic curve, and p ^ char/c, then UI 1 (k, E[p\) = 0. 

(f) //char k ^ 2, and A is the Jacobian of the smooth projective model of y 2 = f(x), where 
f G k[x] is separable of odd degree, then UI 1 (k,A[2]) = 0. 

Proof. 

(a) See |Mil06l Example 1.4.11 (i)]. 

(b) Combine (jaj) with Shapiro's lemma |AW67t §4, Proposition 2] to obtain the result for a 
finite permutation module [Z / nZ)[G k / G l\ for a finite separable extension L of k. The 
result for direct summands of direct sums of these follows. 

(c) This is a consequence of the Chebotarev density theorem: see |BPS10| . 

(d) Let G be the image of Gk — > Ant M(k s ). Then any Sylow p-subgroup P of G is cyclic. 
But the restriction H 1 (G, M) -»■ H 1 (P, M) is injective |AW67l §6, Corollary 3], so (jcj) 
shows that LLT 1 (fc, M) = 0. 

(e) Any Sylow-p-subgroup of GL 2 (F p ) is conjugate to the group of upper triangular unipotent 
matrices, which is cyclic. Apply ([d]). 

(f) The group A[2] is a direct summand of the permutation Z/2Z-module on the set of zeros 
of/. Apply®. □ 

3.3. Jacobians of hyperelliptic curves. See |PRllt Example 3.12(b)] for a 2-dimensional 
Jacobian A with III 1 (Q, A[2]) ^ 0. Such examples are rare: a special case of Proposi- 
tion [3]4] below shows that asymptotically 100% of 2-dimensional Jacobians A over Q have 
W 1 (Q 1 A[2]) = 0. 

Proposition 3.4. Fix g > 1 and a prime p. For random f{x) G Z[x] of degree 2g + 1 with 
coefficients in [—B,B], if A is the Jacobian of the smooth projective model X of y 2 = f(x), 
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the probability that III 1 (Q, A[p\) = tends to 1 as B — >■ oo. T/ie same holds if 2g + 1 is 
replaced by 2g + 2 ^/ie general case for a genus g hyperelliptic curve). 

Proof. By Proposition I3.3( lej) we may assume g>2. We may assume that / is separable. 

First consider the case p ^ 2. Generically, the image of Gq — > Ant A[p] is as large as 
possible given the existence of the Weil pairing e p , i.e., isomorphic to GSp 23 (F p ). By the 
Hilbert irreducibility theorem, the same holds for asymptotically 100% of the polynomials 
/. By Proposition I3.3( lcj). III 1 (Q,A[p]) is contained in the subgroup H 1 (GSp 2s (F p ), A[p}) of 
H^Q, A\p]), and that sub group is because the central element —I G GSp 29 (F p ) has no 
fixed vector (cf. |Fou64l Lemma 14.4] and |Pol71t Theorem 2.3]). 

Now suppose that p = 2. In the degree 2g + 1 case, we are done by Proposition I3.3fjf]) . 
So assume that deg / = 2g + 2. Let A be the set of zeros of / in Q, so $A = 2g + 2. For 
m G Z/2Z, let W m be the quotient of the sum-m part of the permutation module ~ F 2 9+2 
by the diagonal addition action of F 2 . Then the (jQ-module A [2] may be identified with Wo, 
and W m is a torsor under Wo- 

Again by the Hilbert irreducibility theorem, we may assume that the group Gal(Q(A[2])/Q) ~ 
Gal(/) is as large as possible, i.e., equal to S2 9 +2- Then DI 1 (Q, A[2]) C H 1 (5*23+2, Wo) C 
H 1 (Q,A[2]). The group H 1 (S , 2 3 +2, Wo) is of order 2, generated by the class cw 1 of Wi 
|Pol71t Theorem 5.2]. Computations as in |PS99| §9.2] show that for each prime £, the 
probability that f(x) factors over TLi into irreducible polynomials of degree 2g and 2 defin- 
ing unramified and ramified extensions of Q^, respectively, is of order l/£ (not smaller) as 
£ — > 00, and in this case no point in Wi is GQ £ -invariant, so c>Vi has nonzero image in 
H 1 (Q£, A[2]). Since the conditions at finitely many £ are asymptotically independent as 
B — > 00, and since ^2l/£ diverges, there will exist such a prime £ for almost all /, and in 
this case c m <£ EU^Q, A[2}), so IH^Q, A[2\) = 0. □ 

Remark 3.5. Proposition 13.41 can easily be extended to an arbitrary global field of character- 
istic not equal to 2 or p. 

Remark 3.6. Let X be the smooth projective model of y 2 = f{x), where f(x) G k[x] is 
separable of degree 2g + 2. As torsors under A[2] ~ Wo, we have T — W 3 _i (cf. |Mum7l( 
p. 191]). 

3.4. Jacobians with generic 2-torsion. Suppose that A is a curve of genus g > 2 over 
a global field k of characteristic not 2 such that the image G of Gk — > Aut A [2] is as large 
as possible, i.e., Sp 29 (F 2 ). (This forces X to be non-hyperelliptic if g > 3.) By |Pol71t 
Theorems 4.1 and 4.8], the group H 1 (G, A[2]) C H 1 (G/ C , A[2]) is of order 2, generated by cj. 
So Proposition I3.3([cj ) shows that III 1 (/c, A[2]) is of order 2 or 1, according to whether the 
nonzero class c-j- lies in HI 1 ^, A[2]) or not. 

4. Selmer groups as intersections of two maximal isotropic subgroups 

4.1. Quadratic form arising from the Heisenberg group. Let A be an abelian variety 
over a field k. Let A be its dual abelian variety. Let A : A — > A be an isogeny equal to its 
dual. The exact sequence 

-)• A[X] ^aAa^o 
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gives rise to the "descent sequence" 

-> A R\A[\]) -> H 1 (A)[A] -> 0, (3) 

where H 1 (A)[A] is the kernel of the homomorphism H 1 (A) : H 1 (A) — > H 1 (yl). 
Since A is self-dual, we obtain an (alternating) Weil pairing 

e A : A[X] x A[X] -+G m 

identifying A [A] with its own Cartier dual (cf. |Mum70t p. 143, Theorem 1]). Composing the 
cup product with H 1 ^) gives a symmetric pairing 

U:H 1 (A[A])xH 1 (A[A])^H 2 (G m ) 

ex 

and its values are killed by degA. It is well-known (especially when A is separable) that the 
image of the natural map A(k)/XA(k) — > H 1 (A[A]) is isotropic with respect to U. 

In the rest of Section HJ we will assume that we are in one of the following cases: 
I. The self-dual isogeny A has odd degree. 

II. The self-dual isogeny A is of the form (py for some symmetric line sheaf Jz? on A. 
(Symmetric means [— l]*Jzf ~ Jzf. For the definition of 0^, see |Mum70t p. 60 and 
Corollary 5 on p. 131].) 

In each of these cases, we will construct a natural quadratic form q whose associated bilinear 
pairing is U. Moreover, in each case, we will show that the image of A{k) / \A{k) — > H 1 (y4[A]) 

is isotropic with respect to q. 

Remark 4.1. We will need both cases, since, for example, we want to study Se\ p E for every 
prime p, including 2. 

Remark 4.2. For any symmetric line sheaf Jzf, the homomorphism is self-dual |Pol03t 
p. 116]. If moreover «if is ample, then is an isogeny (see |Mum70t p. 124 and Corollary 5 
on p. 131]). 

Remark 4.3. The obstruction to expressing a self-dual isogeny A as <f)^> is given by an element 
C\ E H 1 (A[2]). For example, if A is an odd multiple of the principal polarization on a Jacobian 
of a curve with no rational theta characteristic, then c\ ^ 0. See |PRllt §3] for these facts, 
and for many criteria for the vanishing of c\. 

Remark AA. If A = 2/i for some self-dual isogeny /i: A — > A, then A is of the form since 
c\ = 2c M = 0. Explicitly, take Jz? := (l,/x)*<^, where is the Poincare line sheaf on A x A 
(see |Mum70[ §20, proof of Theorem 2]). 

We now return to the construction of the quadratic form. 
Case I: deg A is odd. 

Then q{x) := — ^ i U x is a quadratic form whose associated bilinear pairing is — U. 

\ e A J e x 

(The sign here is chosen to make the conclusion of Corollary 14 . 61 hold for q.) Since the image 
of A(k)/XA(k) — > H 1 (y4[A]) is isotropic with respect to U, it is isotropic with respect to q 

too. 
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Case II: there is a symmetric line sheaf Jzf on A such that \ = (This hypothesis 

remains in force until the end of Section |4~T1 ) 

When A is separable, Zarhin |Zar74| §2] constructed a quadratic form q: H 1 (A[A]) — > 
H 2 (G, n ) whose associated bilinear pairing was U; for elliptic curves, C. O'Neil showed that 

the image of A(k)/XA(k) — > H 1 (t4[A]) is isotropic for q (this is implicit in |O'N02t Proposi- 
tion 2.3]). Because we wish to include the inseparable case, and because we wish to prove 
isotropy of the quadratic form for abelian varieties of arbitrary dimension, we will give a 
detailed construction and proof in the general case. 

The pairs (x, 0) where x G A(k) and is an isomorphism from Jz? to r*Jzf form a (usually 
nonabelian) group under the operation 

(X,0)(x',0') = (X + X',(T X > (/))(/)'). 

The same can be done after base extension, so we get a group functor. Automorphisms of 
J2? induce the identity on this group functor, so it depends only on the class of Jz? in Pic A. 

Proposition 4.5 (Mumford). 

(a) This functor is representable by a finite-type group scheme 1-1(5?), called the Heisenberg 
group (or theta group or Mumford group). 

(b) It fits in an exact sequence 

1 -»• G m -»• H(£?) -> A[X] -> 1, (4) 

where the two maps in the middle are given by t h-> (0, multiplication by t) and (x,(j)) to 
x. This exhibits H(Sf) as a central extension of finite-type group schemes. 

(c) The induced commutator pairing 

A[X] x A[X] -)• G m 

is the Weil pairing ex- 
Proof. See |Mum91l pp. 44-46]. □ 

Corollary 4.6. The connecting homomorphism q: H 1 (A[A]) — > H 2 (G m ) induced by (jl]) is a 
quadratic form whose associated bilinear pairing E 1 (A[X]) x H^AfA]) H 2 (G m ) sends (x, y) 
to —x U y. 

Proof. Applying |PR114 Proposition 2.9] to @ shows that q is a quadratic map giving rise to 
the bilinear pairing claimed. By Remark 12.11 h remains to prove the identity q(— v) = q(v). 
Functoriality of (j3J) with respect to the automorphism [—1] of A gives a commutative diagram 

1 G m H(Sf) A[X] 1 



— - n([-i]*sf) — - a[\] — - i 

But [—1]*J? ~ , so both rows give rise to q. Functoriality of the connecting homomorphism 
gives q(—v) = q(v) for any v E H 1 (A[A]). □ 

Remark 4.7. The proof of the next proposition involves a sheaf of sets on the big fppf site of 
Spec k, but in the case char k \ deg A, it is sufficient to think of it as a set with a continuous 
Gfe-action. 
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Proposition 4.8. Identify A(k) / XA(k) with its image W under iJ in Q. Then q\\y = 0. 

Proof. Let 8? be the Poincare line sheaf on A x A. For y G A(k), let be the line sheaf 
on A obtained by restricting & to A x {?/}. For any y±,y2 G there is a canonical 

isomorphism t yij y 2 ' & yi <8> <^y 2 — >* ^yx+yn satisfying a cocycle condition |Pol03| §10.3]. 

The group %{S^){k) acts on the left on the set of triples (x, y, 0) where x G A(fc), y G A(fc), 
and 0: J£f ® ^ (r*«5f) as follows: 

0, 0)0', 00 = (z + a;', J/', (^'0)0') • 
The same holds after base extension, and we get an fppf-sheaf of sets G{^f) on which %(Jzf) 
acts freely. There is a morphism G(J£) — > A sending (x, y, 0) to y, and this identifies A with 
the quotient sheaf T-L(J^)\G (Jf) . There is also a morphism G(^f) —> A sending (x,y,(f>) to 
x, and the action of on G(J5f) is compatible with the action of its quotient A[X] on A. 

Thus we have the following compatible diagram 

1 U{S£) - Q{5£) a 

s> A[X] ^A^^A -0 

where the first row indicates only that "H(J2?) acts freely on £7(«i?) with quotient being A. 
This is enough to give a commutative square of pointed sets 

H°(A) 

H°(A) -H^A]), 

soH°(A) -> H 1 (A[A]) factors through H 1 ^^)). But the sequence H 1 ^^)) -> H^AfA]) ->■ 
H 2 (G m ) from (0} is exact, so the composition E°(A) -> H 1 (A[A]) H 2 (G m ) is 0. □ 

Remark 4.9. Proposition 14.81 can be generalized to an abelian scheme over an arbitrary base 
scheme S. The proof is the same. 

4.2. Local fields. Let k v be a local field. The group H 1 (/c„, A[A]) has a topology making it 
locally compact, the group may be identified with a subgroup of Q/Z and given 

the discrete topology, and the quadratic form q: H 1 (/Cj ) , A[X]) — > H 2 (fc„,G m ) is continuous 
(cf. |Mil06l III. 6. 5]; the same arguments work even though (T4|) has a nonabelian group in the 
middle). The composition 

H 1 ^, A[X\) A H. 2 (k v , G m ) ^ Q/Z. 

is a quadratic form q v . By local duality |Mil06t 1.2.3, 1.2.13(a), III. 6. 10], q v is nondegenerate. 
Moreover, H 1 (fc 1) , A[X]) is finite if char/c„ \ degA [M il06| 1.2.3, 1.2.13(a)], and er-compact in 
general [Mil06, 111.6.5(a)], so it is second-countable by Corollary 12.121 

Proposition 4.10. Let k v be a local field. In Q for k v , the group W ~ A{k v )/XA{k v ) is 
a compact open maximal isotropic subgroup of (H 1 (fc„, A [A]), q v ), which is therefore weakly 
metabolic. 
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Proof. By Proposition 14. 8[ q v restricts to on W, so it suffices to show that W ± = W. Let 
A{k v ), be A(k v ) modulo its connected component (which is nonzero only if k v is 1 or C). 
Then W is the image of A(k v ). — > H 1 (/c„, A [A]), so W 1 - is the kernel of the dual map, which 
by Tate local duality |Mil06l 1.3.4, 1.3.7, III. 7.8] is H 1 (A;„, A[X]) -> E 1 (k v ,A). This kernel is 
W, by exactness of ([3]). □ 

Suppose that k v is nonarchimedean. Let O v is its valuation ring and let F„ be its residue 
field. Suppose that A has good reduction, i.e., that it extends to an abelian scheme (again 
denoted A) over O v . Then the fppf-cohomology group H 1 ((9„, A[\\) is an open subgroup of 

Remark 4.11. If moreover charF^ { deg A, then we may understand H 1 ((9 1 ,, A[X]) in concrete 
terms as the kernel H 1 (/c^, v4[A]) unr of the restriction map 

H 1 (^,A[A])^H 1 (A;r,^[A]) 

of Galois cohomology groups. 

Proposition 4.12. Suppose that k v is nonarchimedean. Suppose that A extends to an abelian 
scheme over O v . Then the subgroups W ~ A(k v )/XA(k v ) and E 1 (O v , A[X]) in H 1 ^, A[X]) 
are equal. In particular, H 1 ((9 1) , A[X\) is a maximal isotropic subgroup. 

Proof. By |Mil80l 111.3.11(a)] and |Lan56j . respectively, R\O v ,A) ~ R 1 (¥ V ,A) = 0. The 
valuative criterion for properness |Har77| II. 4. 7] yields A(O v ) = A(k v ) and A(O v ) = A(k v ). 
So taking cohomology of ()3]) over O v gives the result. □ 

4.3. Global fields. Let k be a global field. For any nonempty subset S of Q containing the 
archimedean places, define the ring of 5-integers 0$ '■= {x G k : v(x) > for all v ^ S}. 

Let A be an abelian variety over k, Let A: A — > A be a self-dual isogeny as in Case I 
or II of Section H~T1 Choose a nonempty finite S containing all bad places, by which we mean 
that S contains all archimedean places and A extends to an abelian scheme A over Os- In 
Example [2TI8] take / = Q, V { = E 1 (k v ,A[X]), Q { = q v , and W { = A(k v )/XA(k v ), which is 
valid by Proposition 14.101 The resulting restricted direct product 

equipped with the quadratic form 

A{k 

i n y Kv , s±[A\), ■ 



Q: Jl'jH^^^A]), 



-+ o/z 



XA{k v ) 



is a second-countable weakly metabolic locally compact quadratic module. Proposition 14.121 
which applies for all but finitely many v, shows that 



18 



(The subgroup E 1 (O v , A [A]) is defined and equal to A(k v )/XA(k v ) only for v S, but that 
is enough.) 

As usual, define the Selmer group 

Sel A A := ker ( H^Jfe, A[X\) -)• JJ H 1 ^, A) ) . 

Below will appear UI 1 (k, A[X\), which is a subgroup of Sel,\A, and is not to be confused 
with the Shafarevich-Tate group III (A) = LU^fc, A). 

Theorem 4.13. 

(a) The images of the homomorphisms 

K\k,A[X]) 



are maximal isotropic subgroups with respect to Q. 
(b) TTie vertical map induces an isomorphism from Sel> A/ffl^/c, A [A]) io i/ie intersection of 
these two images. (See Section^ for information about HI (A;, A[A]), which is often 0.) 

Proof. 

(a) The subgroup Ylven A(A;„) / XA(k v ) (or rather its image W under the horizontal injection) 
is maximal isotropic by construction. 

The vertical homomorphism E 1 (k, A [A]) -> TT (H 1 ^, A[A]), H 1 ^, A[A])) is well- 

defined since each element of H 1 ^, A [A]) belongs to the subgroup H^CV, A [A]) for some 
finite TClj containing S, and O7- C O v for all v ^T. Let be the image. Suppose 
that s G H 1 (/c, A[A]), and let w G W be its image. The construction of the quadratic form 
of Corollary 14.61 is functorial with respect to base extension, so Q(w) can be computed 
by evaluating the global quadratic form 

q: E\k,A[X}) ^H 2 (A;,G m ) 

on s, and afterwards summing the local invariants. Exactness of 

E 2 (k, G m ) R 2 (k v , G m ) ^ Q/Z 

in the middle (the reciprocity law for the Brauer group: see |GS06t Remark 6.5.6] for 
references) implies that the sum of the local invariants of our global class is 0. Thus 

Q\w = o. 

It remains to show that W is its own annihilator. Since e\ identifies A [A] with its 
own Cartier dual, the middle three terms of the 9-term Poitou-Tate exact sequence 
( |Mil06[ 1.4.10(c)] and |OA091 4.11]) give the self-dual exact sequence 

E\k,A[X}) A ]X(a\k v ,A[X}),}i\O v ,A[X}))^R\k,A[X]r, 
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where * denotes Pontryagin dual. Since W = im(/3i) and the dual of (3± is 71, 

W ± = ker( 7l ) = im(^i) = W. 

(b) This follows from the exactness of ([3]) for 5* = Spec k v for each uGft. □ 

Remark 4.14. There is a variant of Theorem 14.131 in which the infinite restricted direct 
product is taken over only a subset S of Q containing all bad places and all places of residue 
characteristic dividing degA. If S is finite, then the restricted direct product becomes a 
finite direct product. The same proof as before shows that the images of Ylves A(k v ) / XA(k v ) 
and H 1 (0,5, A[X\) are maximal isotropic. The intersection of the images equals the image of 
Sel A A. 

Remark 4.15. Suppose that A = JacX and A is multiplication-by-2, with J?f as in Re- 
mark |4~4"1 Let c-j- be as in Definition 13.21 and let Cf iV be its image in H 1 (/c„, ^4 [2]). It follows 
from [PS991 Corollary 2] that c T G Sel 2 A. By [PRlTl Theorem 3.9], 

x U x = x U cr (5) 

for all x G H 1 (/c w , A[2]). This, with Remark l2.8[ implies that q v takes values in |Z/Z (instead 
of just |Z/Z) if and only if &j-, v — 0- Thus 

Q takes values in |Z/Z c r G UI 1 (k, A[2]). 

For an example with cj G Sel2 A — III 1 (fc, A [2]), and another example with 7^ oj G 
ni^fc, A[2]), see jPRlll Example 3.12]. 

Remark 4.16. Suppose that we are considering a family of abelian varieties with a systematic 
subgroup G of SeU A coming from rational points (e.g., a family of elliptic curves with 

rational 2-torsion). Let X be the image of G in " (H 1 ^, A[\]),B 1 (O v , A[X))). Then 

our model for SeU A should be that its image in X /X is an intersection of random maximal 
isotropic subgroups. In particular, the size of Se^ A/ILL 1 (k, A[X\) should be distributed as 
4^X times the size of the random intersection. 

Example 4.17. Suppose that char k 7^ p and A is an elliptic curve E: y 2 = f(x). The theta 
divisor on E is the identity point with multiplicity 1. Let «if = ff(pQ). Then A is E A E, 
and Se^ A is the p-Selmer group Sel p E. Moreover, IE 1 (A;, E\p\) = by Proposition Qle]). 
Thus Theorem 14.131 identifies Sel p E as an intersection of two maximal isotropic subspaces 
in an F p -vector space. Moreover, the values of quadratic form on that space are killed by p, 
even when p = 2, since C7- = in (j3J). In particular, dimSelp-E should be expected to be 
distributed according to Xs c \ p , with the adjustment given by Remark 14.161 when necessary 
for the family at hand. This is evidence for Con j ect ure 1 1 . 1 (laj ) . The rest of Conjecture II. 1[ 
concerning moments, is plausible given Proposition I2.22f lal). 

Example 4.18. The same reasoning applies to the p-Selmer group of the Jacobian of a 
hyperelliptic curve y 2 = f(x) over a global field of characteristic not 2 in the following cases: 

• / is separable of degree 2g + 1, and p is arbitrary; 

• / is separable of degree 2g + 2, and p is odd. 

(Use Propositions I3.3ljf| ) and I3.4[ and Remark 13.51 ) This suggests Conjecture 11.71 
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Example 4.19. Consider y 2 = f(x) over a global field k of characteristic not 2 with deg / = 
2g + 2 for even g > 2. Proposition 13.41 and Remark 13.51 show that III 1 (A:, A[p\) is with 
probability 1 for each p ^ char k. But the Hilbert irreducibility theorem shows that cj ^ 
with probability 1, so Remarks 14. 1 51 and 12.81 suggest that dimSel2 A now has the distribution 
Xgei 2 + 1- This suggests Conjecture 11.81 

In the analogous situation with g odd, it is less clear what to predict for Sel2 A: using 
techniques in |PS99l §9.2] one can show that the probability that cy^ lies in Sel2 A is strictly 
between and 1, and the existence of this element may invalidate the random model. 



5. Relation to heuristics for III and rank 

The Hilbert irreducibility theorem shows that asymptotically 100% of elliptic curves (or- 
dered by naive height) have E(Q)[p] = 0. (For much stronger results, see |Duk97j and 
[JonlO] .) So for statistical purposes, when letting E run over all elliptic curves, we may 
ignore contributions of torsion to the p-Selmer group. 

In analogy with the Cohen-Lenstra heuristics |CL84] . Delaunay has formulated a conjec- 
ture describing the distribution of Shafarevich-Tate groups of random elliptic curves over Q. 
We now recall his conjectures for dim]p p III[p]. For each prime p and r G Z> , let Am^, be 
a random variable taking values in 2Z> such that 

rr°° Ci _ B -(2H-2i-i)-\ 

T>rr>h(Y r , — 0n\ — ri ~n(2r+2n-l) 1 Jj=n+lV L V ) 

Frob (Amp ] r - in) - p — . 

The following conjecture is as in |Del01t Example F and Heuristic Assumption], with the 
correction that u/2 in the Heuristic Assumption is replaced by u (his u is our r). This 
correction was suggested explicitly in |Del07j §3.2] for rank 1, and it seems natural to make 
the correction for higher rank too. 

Conjecture 5.1 (Delaunay). Letr,n e Z> . If E ranges over elliptic curves overQ of rank 
r, up to isomorphism, ordered by conductor, then the fraction with dimv p UI(E)[p] = 2n 
equals Prob (^in[p], r = 2n) . 

If the "rank" r itself is a random variable R, viewed as a prior distribution, then the 
distribution of dimSelp-E should be given by R + Xhi[ p ],_r. On the other hand, Theorem 14.131 
suggests that dimSelp-E should be distributed according to As i p . Let -Rconjectured be the 
random variable taking values and 1 with probability 1/2 each. 

Theorem 5.2. For each prime p, the unique "L>Q-valued random variable R such that Xo, e \ p 
and R + AmfpiR have the same distribution is -Rconjectured- 
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Proof. First we show that -Rconjectured has the claimed property. This follows from the follow- 
ing identities for n G Z>o: 

2n 

P 



Prob (X Sclp = In) =c\ 



pj 



2n 

-2i\-l 

i>n+l i=l 



n 

1 -n(2n-X) Y[ (1- P -^)H(1-P- 



iprob (X m[ph0 = 2n) 



2n+l 

Prob(X Sclp = 2n + l) = c] 



2n+l 

_ n-i 2 ^ 1 )) . n -n(2n+l) 



i>0 j=l 

n 

V n(2n+1) ' [ (i - p- (2i+1) )Y[{i 



V 

i>n+l i=l 

= iprob (X m[p]A = 2n) . 

Next we show that any random variable R with the property has the same distribution as 
-Rconjectured- For v G Z> , define a function f r : Z> ->■ 1R by / r (s) := Prob(X m[ p] ir = s - r). 
The assumption on R implies that 

CO CO 

^2 Prob( J R = r)f r (s) = ^ Prob (^conjectured = / r (s). 
r=0 r=0 

Thus to prove that R and -Rconjectured have the same distribution, it will suffice to prove that 
the functions f r are linearly independent in the sense that for any sequence of real numbers 
(a r ) r >o with J2 r >o \ a A < 00 the equality Yl^Lo a rfr = ® i m ph es that a r = for all r G Z> . 
In fact, a r = by induction on r, since / r (s) = for all s > r, and /(r, r) > 0. □ 
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